Privacy Policy

1. Introduction

Salitup ("we", "our", or "us") operates an appointment and business management platform for salons and service businesses. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

By using Salitup, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our service.

2. Information We Collect

Account information: When you register, we collect your name, email address, and password (stored as a secure hash). Business owners also provide a company name and location details.

Business data: Information you add to the platform — including staff profiles, client records, services, appointments, and schedules — is stored on your behalf.

Client booking data: When clients book appointments through your public booking page, we collect their name, email, and optionally their phone number and notes.

Billing information: Payment processing is handled by Stripe. We do not store your full card details. We retain a Stripe customer ID and subscription ID to manage your plan.

Usage data: We may collect information about how you use the platform (page views, feature usage) to improve the service. This data is anonymised and aggregated.

Log data: Our servers automatically record information including your IP address, browser type, and pages visited. This data is used for security monitoring and debugging.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Salitup platform
• Process transactions and manage your subscription
• Send transactional emails (booking confirmations, password resets, payment receipts)
• Respond to support requests and communicate about your account
• Monitor and improve security and performance
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

4. Data Sharing

We share your information only in the following circumstances:

• Service providers: We use Stripe for payments, Resend for transactional email delivery, and cloud infrastructure providers to host the service. These providers process data only as necessary to provide their services.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of Salitup, our users, or the public.
• Business transfers: If Salitup is involved in a merger or acquisition, your information may be transferred as part of that transaction. You will be notified in advance.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required to retain it for legal or billing purposes (e.g., invoices must be kept for tax compliance).

Client booking records are retained for the duration of your account to support your business operations. You may delete individual records at any time from within the dashboard.

6. Security

We implement industry-standard security measures including HTTPS encryption, bcrypt password hashing, HMAC-signed session tokens, and rate limiting on authentication endpoints. Access to your data is restricted to authorised personnel only.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and personal data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing of your data in certain circumstances.

To exercise any of these rights, please contact us at the address below.

8. Cookies

We use a single session cookie (__salitup_session) to keep you logged in. This is a strictly necessary cookie and is not used for tracking or advertising. We do not use third-party analytics or advertising cookies.

9. Children's Privacy

Salitup is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or by placing a prominent notice on our website. Your continued use of Salitup after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: support@salitup.com